Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer
File: Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer (raw, json)
Hash identifier: f4TgC5J8VdQGrk1t5S9fUQNjmmWv7sTQQXmSU9S+H1E=
Subject key identifier: 2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420683E6868D1482458C5E7CAE0FC600B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215755
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3e:68:68:d1:48:24:58:c5:e7:ca:e0:fc:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1ede80640c9f484f75dd39c13ed6c70e074a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:55:55:15:5e:f8:62:76:b9:a3:f6:e1:95:
40:c1:a6:aa:38:7c:50:35:d2:ad:85:0d:eb:3c:99:
7f:83:ac:f4:67:60:a4:5c:25:5d:c3:a8:18:6d:8a:
60:19:0e:93:f9:73:8d:31:1a:18:42:9c:f2:a0:d7:
37:8f:a2:d6:e2:bd:1b:c0:b0:e5:fe:56:5e:24:36:
01:80:dc:af:e4:ae:87:c3:d1:6b:90:eb:4d:8b:f7:
25:c4:ed:04:38:bd:0f:34:a7:18:fe:d4:68:b7:9c:
68:ff:c1:5b:75:b4:e6:31:96:a8:eb:5f:52:e4:b7:
1d:c8:bc:ed:8f:d3:07:2b:51:09:4e:b3:25:e3:5c:
aa:3c:a9:d0:c7:b3:11:d3:07:bd:eb:7f:05:fa:b4:
26:8b:77:9e:83:5b:56:bc:64:ed:b8:2c:26:65:fc:
c0:a2:29:56:f5:c8:12:af:f1:a2:5c:98:ad:b5:5d:
c4:a1:a7:cc:8d:66:a3:8e:dc:cb:10:cc:3e:bc:b3:
ea:3f:a5:0c:69:62:c5:8a:93:2f:1c:46:97:cc:6f:
fb:77:f8:2e:37:36:1b:0c:d9:ca:bd:f5:ae:40:21:
86:70:d5:f8:d5:08:4f:0a:0d:d4:89:20:5b:20:48:
3f:46:0c:08:e6:79:48:3d:0c:88:bf:49:23:d4:85:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215755
Signature Algorithm: sha256WithRSAEncryption
9b:37:e3:92:91:42:cf:61:36:ca:8b:ba:a5:c5:48:4a:cf:1c:
80:67:94:58:bf:90:f3:ca:f8:26:8e:fc:b7:cd:9a:a4:c4:d9:
d9:9b:41:91:d1:4a:7a:6e:4c:e3:25:71:59:b5:a5:ef:5d:1b:
bf:03:db:b7:1c:f4:bc:45:72:36:f8:6f:29:7b:20:9e:fe:95:
4c:03:60:51:35:2b:33:c6:e2:5a:41:d1:e2:a9:f5:f4:a5:4a:
b4:38:57:64:13:e2:43:0b:57:46:b8:51:07:7e:f4:df:d1:a9:
b6:f5:a2:7d:3c:89:dc:97:0e:7b:b5:f5:cd:ab:5a:72:fb:c1:
9b:e8:de:08:40:09:40:a7:f0:40:4a:0c:6b:29:05:b4:0a:c9:
54:4e:9e:55:b3:db:b5:0f:7d:f6:28:e6:fc:7c:74:00:96:2e:
46:46:10:00:53:c4:c4:dd:9c:2e:69:34:9e:94:77:6e:18:af:
9f:24:31:45:cb:e8:43:3e:2b:30:08:f4:07:ec:5e:c8:17:92:
fe:34:d7:6b:6c:f7:15:d3:54:a7:8e:1e:b4:cd:e7:4a:57:e1:
bc:32:93:50:0a:1c:67:34:f0:e8:b0:09:ce:d6:5f:8d:b5:06:
c5:4b:22:e1:f2:31:f0:36:ff:d4:c2:c3:eb:14:eb:bb:36:5e:
1d:08:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:36 2025 by rpki-client